Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37332e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          qJA0HWwFpndY1UQJ7GwrD4o7N6CqiMdWL2Bmv8m8tLM=
Subject key identifier:   E1:D5:3A:78:13:90:34:0E:38:B8:C8:EC:56:67:4C:85:F6:85:B1:CD
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       7011FE0E33619D3B477BB4E0482BB947BE56BAD6
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37332e302f32342d3234203d3e20323637323531.roa
Signing time:             Thu 15 Feb 2024 18:00:01 +0000
ROA not before:           Thu 15 Feb 2024 17:55:01 +0000
ROA not after:            Thu 13 Feb 2025 18:00:01 +0000
asID:                     267251
IP address blocks:        45.232.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:11:fe:0e:33:61:9d:3b:47:7b:b4:e0:48:2b:b9:47:be:56:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: Feb 15 17:55:01 2024 GMT
            Not After : Feb 13 18:00:01 2025 GMT
        Subject: CN=E1D53A781390340E38B8C8EC56674C85F685B1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:bc:c5:58:f3:e8:43:da:f7:d6:75:29:48:
                    8c:ef:82:63:34:32:64:57:d1:5d:72:14:14:b8:14:
                    2e:d3:52:54:6e:18:35:fe:54:a6:1e:a9:85:bd:2a:
                    65:04:c5:08:04:af:ea:47:15:5e:c1:5e:09:03:48:
                    0f:c7:2b:ad:95:d4:40:b9:f1:be:85:4e:a5:22:c3:
                    49:6f:e8:0e:62:61:73:d0:68:30:73:f1:59:41:bc:
                    08:6d:ab:32:90:1b:5c:91:ea:87:de:ee:6a:62:55:
                    20:90:52:5d:72:91:25:d3:b2:5b:9b:bc:39:e6:2f:
                    da:91:12:6b:09:ca:3a:c2:14:18:6c:2d:fc:b0:5c:
                    da:fc:a4:31:de:f2:db:43:ea:2b:76:8e:94:32:98:
                    04:45:9a:c9:e9:be:ee:74:1d:ba:e8:b9:5d:94:6b:
                    96:00:3f:fc:a7:eb:63:d9:2c:b4:5b:a2:eb:b1:4f:
                    17:05:7b:e7:83:27:6a:2d:19:88:06:07:bb:60:7c:
                    a0:08:c5:6e:8e:5e:18:29:8e:40:57:3b:a0:ca:32:
                    21:d2:2a:fc:7e:61:be:81:8f:be:48:51:13:d0:ca:
                    a8:f6:bf:a9:77:5b:46:98:0d:30:99:b4:ab:44:81:
                    58:9f:bc:29:b5:c3:2d:be:4a:e9:1c:05:a5:f0:1a:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:3A:78:13:90:34:0E:38:B8:C8:EC:56:67:4C:85:F6:85:B1:CD
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37332e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:73:94:24:26:66:6d:4f:f0:af:83:6b:1f:cb:75:b3:9d:
         6d:2c:d6:26:fa:9d:ee:6f:db:23:f4:2e:a7:95:c4:b6:d1:1f:
         74:82:f3:7b:3a:e7:52:cd:fc:ec:1a:b8:04:0e:69:0c:52:64:
         2f:4a:89:f0:10:23:2d:f4:c4:5d:37:02:85:f2:e3:43:14:1c:
         44:a6:5b:b4:24:ba:39:3a:bf:d0:12:34:e1:be:34:5e:22:51:
         b7:a8:1e:af:9a:3e:80:62:e2:4b:e8:ea:c7:ca:e0:e4:07:29:
         d4:50:f3:36:16:75:02:9e:38:4d:cf:a2:d4:d9:2a:ab:33:74:
         1a:73:c4:42:f8:88:3e:ea:f4:bc:cd:a2:19:38:39:39:1b:f3:
         b7:ec:98:46:a0:61:ba:3e:58:c8:ba:0c:6d:10:4c:cf:5f:35:
         8a:2b:a6:27:12:04:8b:68:c5:98:62:7e:ea:21:a3:5e:99:4e:
         52:5d:66:ac:72:50:9c:45:de:5f:b3:2a:a5:e9:af:52:25:6e:
         9f:5f:19:b3:0b:d2:df:ec:b0:8b:a8:cb:af:82:d3:97:6e:8a:
         48:ed:50:93:b5:4b:14:24:51:77:f9:48:48:f4:d7:a4:46:1e:
         8e:c8:98:d1:4f:b0:71:21:c0:bd:cf:0d:7f:92:5f:c6:1a:a4:
         a1:db:aa:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcBH+DjNhnTtHe7TgSCu5R75WutYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM5Mjk2MTAyMzE1ODI0Q0ZEMjYzQjk3M0ZBOEUyNkFE
RUFEMTQ3NTAeFw0yNDAyMTUxNzU1MDFaFw0yNTAyMTMxODAwMDFaMDMxMTAvBgNV
BAMTKEUxRDUzQTc4MTM5MDM0MEUzOEI4QzhFQzU2Njc0Qzg1RjY4NUIxQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIO7zFWPPoQ9r31nUpSIzvgmM0
MmRX0V1yFBS4FC7TUlRuGDX+VKYeqYW9KmUExQgEr+pHFV7BXgkDSA/HK62V1EC5
8b6FTqUiw0lv6A5iYXPQaDBz8VlBvAhtqzKQG1yR6ofe7mpiVSCQUl1ykSXTslub
vDnmL9qREmsJyjrCFBhsLfywXNr8pDHe8ttD6it2jpQymARFmsnpvu50HbrouV2U
a5YAP/yn62PZLLRbouuxTxcFe+eDJ2otGYgGB7tgfKAIxW6OXhgpjkBXO6DKMiHS
Kvx+Yb6Bj75IURPQyqj2v6l3W0aYDTCZtKtEgVifvCm1wy2+SukcBaXwGllfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4dU6eBOQNA44uMjsVmdMhfaFsc0wHwYDVR0j
BBgwFoAUnJKWECMVgkz9JjuXP6jiat6tFHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy
a28vMC85QzkyOTYxMDIzMTU4MjRDRkQyNjNCOTczRkE4RTI2QURFQUQxNDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDOTI5NjEwMjMxNTgyNENG
RDI2M0I5NzNGQThFMjZBREVBRDE0NzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWZ0VKTW1HZUp2SlBSWEhIbWdIVm02R2M4ZVJaWlNmV2tBdmh2VFFMMmtvLzAv
MzQzNTJlMzIzMzMyMmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALehJMA0GCSqGSIb3DQEBCwUAA4IBAQAyLHOUJCZm
bU/wr4NrH8t1s51tLNYm+p3ub9sj9C6nlcS20R90gvN7OudSzfzsGrgEDmkMUmQv
SonwECMt9MRdNwKF8uNDFBxEplu0JLo5Or/QEjThvjReIlG3qB6vmj6AYuJL6OrH
yuDkBynUUPM2FnUCnjhNz6LU2SqrM3Qac8RC+Ig+6vS8zaIZODk5G/O37JhGoGG6
PljIugxtEEzPXzWKK6YnEgSLaMWYYn7qIaNemU5SXWasclCcRd5fsyql6a9SJW6f
XxmzC9Lf7LCLqMuvgtOXbopI7VCTtUsUJFF3+UhI9NekRh6OyJjRT7BxIcC9zw1/
kl/GGqSh26ps
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org